Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    23-12-2024 14:00

General

  • Target

    JaffaCakes118_94325b4ab1c205d42cf2f0b72004b3e03074fc18efce0d60d45a1fc4a6295657.exe

  • Size

    7.1MB

  • MD5

    41d26efcd1803a117ff3b3f7ea0c0a8f

  • SHA1

    e8315ae908b9e765e398075c0a9148f496d810b8

  • SHA256

    94325b4ab1c205d42cf2f0b72004b3e03074fc18efce0d60d45a1fc4a6295657

  • SHA512

    b98162c2534012eb8ccd122bafeb274ffdf1eb5c6b56b3002775de7b5c51ef708cf329474c36500cfe62cd73a3813545ff54c040ab9001f6e61bb42a4d0de791

  • SSDEEP

    98304:DDKDYIwqilOvXhy0bK2vYGEahbJSKLn1Duis+UH8:Qxvhy6YKhbJVL4V

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_94325b4ab1c205d42cf2f0b72004b3e03074fc18efce0d60d45a1fc4a6295657.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_94325b4ab1c205d42cf2f0b72004b3e03074fc18efce0d60d45a1fc4a6295657.exe"
    1⤵
      PID:868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/868-0-0x0000000000190000-0x00000000008B1000-memory.dmp

      Filesize

      7.1MB